On Jan 18, 2006, at 5:47 PM, Mark Baker wrote:
> Ah, I just read some of the responses. Dan's surprises me;
>
> "Asking a question is asking a question; whether it's a hard
> question or
> not seems orthogonal to safety."
>
> If I asked you "What are the prime factors of this kazillion-digit
> integer", that's a question that would take a large amount of time and
> money to answer. And if it costs money to answer, then that requires
> your bank account be debited by that amount of money, which is a state
> change.
*Every* HTTP request I answer costs money! Thus, *every* web request
is unsafe in precisely this sense; the difference is merely
quantitative.
> Food for thought ...
I'm still hungry! :>
Cheers,
Kendall Clark